Indeed adding the audience as the first parameter of the authorize request did the trick.
I also realized that myself, thanks anyway
Indeed adding the audience as the first parameter of the authorize request did the trick.
I also realized that myself, thanks anyway